Argo/apps/templates/traefik.yaml

116 lines
2.8 KiB
YAML
Raw Normal View History

2022-07-02 22:58:54 +02:00
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
name: traefik
namespace: argo-cd
finalizers:
- resources-finalizer.argocd.argoproj.io
spec:
destination:
server: https://kubernetes.default.svc
namespace: traefik
project: default
source:
chart: traefik
helm:
values: |
image:
repository: &traefikImage library/traefik
name: *traefikImage
tag: v2.8.0
pullPolicy: IfNotPresent
experimental:
http3:
enabled: true
2022-07-02 23:03:14 +02:00
plugins:
enabled: false
kubernetesGateway:
enabled: false
2022-07-02 22:58:54 +02:00
2022-11-15 10:10:25 +01:00
dnsPolicy: ClusterFirstWithHostNet
hostNetwork: true
nodeSelector:
2022-11-15 10:20:26 +01:00
hasDns: "true"
2022-11-15 10:28:05 +01:00
securityContext:
2022-11-15 10:33:14 +01:00
capabilities:
drop: [ALL]
add: [NET_BIND_SERVICE]
readOnlyRootFilesystem: true
runAsGroup: 0
2022-11-15 10:28:05 +01:00
runAsNonRoot: false
2022-11-15 10:33:14 +01:00
runAsUser: 0
2022-11-15 10:28:05 +01:00
affinity:
podAntiAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchLabels:
app.kubernetes.io/name: traefik
app.kubernetes.io/instance: traefik
topologyKey: kubernetes.io/hostname
2022-07-02 22:58:54 +02:00
globalArguments: []
additionalArguments:
2022-11-15 09:02:23 +01:00
# - "--entryPoints.web.forwardedHeaders.trustedIPs=127.0.0.1/32"
2022-07-02 22:58:54 +02:00
- "--api.insecure=true"
envFrom:
- secretRef:
name: traefik-secrets
ports:
2022-07-02 23:03:14 +02:00
traefik:
port: 9000
2022-11-15 09:14:06 +01:00
expose: true
2022-07-02 23:03:14 +02:00
exposedPort: 9000
protocol: TCP
2022-07-02 22:58:54 +02:00
web:
2022-11-15 10:10:25 +01:00
port: 80
2022-11-15 09:24:10 +01:00
expose: false
2022-07-02 23:03:14 +02:00
protocol: TCP
2022-07-02 22:58:54 +02:00
websecure:
2022-11-15 10:10:25 +01:00
port: 443
2022-11-15 09:24:10 +01:00
expose: false
2022-07-02 22:58:54 +02:00
protocol: TCP
tls:
enabled: true
2022-07-03 16:07:36 +02:00
metrics:
port: 9100
expose: true
2022-11-15 09:43:02 +01:00
udp:
port: 6666
protocol: UDP
expose: true
2022-07-02 22:58:54 +02:00
tlsOptions:
default:
sniStrict: true
minVersion: VersionTLS12
service:
2022-07-03 16:51:08 +02:00
enabled: true
2022-11-15 09:18:09 +01:00
type: NodePort
2022-07-02 23:03:14 +02:00
annotations: {}
annotationsTCP: {}
annotationsUDP: {}
labels: {}
spec:
{}
loadBalancerSourceRanges:
[]
externalIPs:
[]
2022-07-02 22:58:54 +02:00
certResolvers: {}
repoURL: https://helm.traefik.io/traefik
targetRevision: 10.24.0
syncPolicy:
automated:
prune: true
selfHeal: true
syncOptions:
- CreateNamespace=true